Strategic Cybersecurity Risk & Governance Lead

mTrade; Oxford (MS); On-site; USD 110,000 - 160,000; Full time

Job summary

mTrade is seeking a Senior Cybersecurity Risk & Governance Analyst to strengthen our GRC program, manage enterprise risk, and coordinate third-party risk and customer due diligence. You will collaborate with CISO, Legal, Audit, and business teams to bolster regulatory compliance and security governance.

The role offers exposure to cloud security, vendor risk, and executive reporting, with a clear path toward leadership in cybersecurity governance, risk, and compliance.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• 5+ years in cybersecurity risk management, governance, or related disciplines.
• Experience in regulated industries (finance, fintech, banking, healthcare, insurance).
• Experience performing risk assessments and maintaining risk registers.
• Experience responding to customer security questionnaires and audits.
• Experience reviewing SOC 1 and SOC 2 reports and vendor due diligence.
• Knowledge of frameworks such as NIST CSF, ISO 27001, SOC 2, PCI DSS.

Responsibilities

• Maintain and enhance the organization's cybersecurity governance, risk, and compliance program.
• Conduct cyber risk assessments for systems, processes, cloud services, and initiatives.
• Manage third-party risk and vendor due diligence activities.
• Coordinate customer security questionnaires, risk assessments, and audits.
• Develop cybersecurity metrics, dashboards, and governance reporting.
• Support continuous improvement through automation and AI-enabled tools.

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

LogicGate

AuditBoard

ProcessUnity

Job description

mTrade is seeking a Senior Cybersecurity Risk & Governance Analyst to strengthen our GRC program, manage enterprise risk, and coordinate third-party risk and customer due diligence. You will collaborate with CISO, Legal, Audit, and business teams to bolster regulatory compliance and security governance.

The role offers exposure to cloud security, vendor risk, and executive reporting, with a clear path toward leadership in cybersecurity governance, risk, and compliance.